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AMENDMENTS TO CLAIMS 

1 . (cancelled) A method for producing at least one ciphertext block from at 
least one plaintext block using a block cipher E and a key K, the method 
comprising: 

receiving n plaintext blocks, wherein n is an integer greater than 0; 
setting Qo equal to an initial value; and 
for each plaintext block of the n plaintext blocks: 
computing Qi = EK(Qi.i) XOR Pi ; and 
computing Cj = M(Pi , Qi), 
thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Cj denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cjj of block Cj, selects a first 

argument of M if bit Pjj is not to be encrypted, and selects a second argument of M 

if bit Pij is to be encrypted. 

2. (cancelled) The method according to claim 1 and wherein M is chosen in 
accordance with a standard indicating bits that are not to be encrypted. 

3. (cancelled) The method according to claim 2 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio- 
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video Standard. 

4. (cancelled) The method according to claim 3 and wherein the standard 
comprises MPEG-2. 

5. (cancelled) A method for producing at least one ciphertext block from at 
least one plaintext block using a block cipher E and a key K, the method 
comprising: 

receiving n plaintext blocks, wherein n is an integer greater than 0, and an 
initial value IV; 

computing IV = M(Pi , IV); 

computing Qo = H(I V); and 

for each plaintext block of the n plaintext blocks: 
computing Qi = EK(Qi.i) XOR Pi ; and 
computing Q = M(Pi , Qi), 
thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 

H is a hash function, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cij of block Ci, selects a first 
argument of M if bit Pij is not to be encrypted, and selects a second argument of M 
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if bit Py is to be encrypted. 

6. (cancelled) The method according to claim 5 and wherein H comprises 
SHAl. 

7. (cancelled) The method according to claim 5 and wherein H(IV') 
comprises Ek(IV') XOR IV'. 

8. (cancelled) The method according to claim 5 and wherein M is chosen in 
accordance with a standard indicating bits that are not to be encrypted. 

9. (cancelled) The method according to claim 8 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio- 
video standard. 

10. (cancelled) The method according to claim 9 and wherein the standard 
comprises MPEG-2. 

1 1 . (cancelled) In a method for producing at least one ciphertext block from 
at least one plaintext block using a block cipher E and a key K in a stream mode, 
wherein Pj denotes an i-th plaintext block, and Ci denotes an i-th ciphertext block, 
an improvement comprising: 

for each bit Cy of block Cj , selecting Py as an output if bit Py is not to be 
encrypted. 
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12. (cancelled) The method according to claim 1 1 and wherein the stream 
mode comprises CFM mode. 

13. (cancelled) Apparatus for producing at least one ciphertext block from at 
least one plaintext block using a block cipher E and a key K, the at least one 
plaintext block comprising n plaintext blocks, the at least one ciphertext block 
comprising n ciphertext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

an initialization unit for setting Qo equal to an initial value; and 

a computation unit operative, for each plaintext block of the n plaintext 

blocks: 

to compute Qi = EkCQui) XOR Pi ; and 
to compute Cj = M(Pi , Qj), 

wherein: 

0 < i <= n, and 

Pj denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cy of block Cj , selects a first 

argument of M if bit Py is not to be encrypted, and selects a second argument of M 

if bit Pjj is to be encrypted. 

14. (cancelled) Apparatus for producing at least one ciphertext block from at 
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least one plaintext block using a block cipher E, a key and an initial value IV, 
the at least one plaintext block comprising n plaintext blocks, the at least one 
ciphertext block comprising n ciphertext blocks, wherein n is an integer greater 
than 0, the apparatus comprising: 

a first computation unit for computing IV' = M(Pi , IV); 
a second computation unit for computing Qo = H(IV'); and 
a third computation unit operative, for each plaintext block of the n 
plaintext blocks: 

to compute Qi = EkCQi-i) XOR Pi ; and 
to compute Cj = M(Pi , Qj), 

wherein: 

0 < i <= n, and 

H is a hash function, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cjj of block Ci , selects a first 

argument of M if bit Pjj is not to be encrypted, and selects a second argument of M 

if bit Pij is to be encrypted. 

1 5. (cancelled) In apparatus for producing at least one ciphertext block from 
at least one plaintext block using a block cipher E and a key K in a stream mode, 
wherein Pj denotes an i-th plaintext block, and Ci denotes an i-th ciphertext block, 
an improvement comprising: 
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a selector unit operative, for each bit Cy of block Cj , to select Py as an 
output if bit Pjj is not to be encrypted. 

16. (cancelled) A method for producing at least one plaintext block from at 
least one ciphertext block encrypted using a block cipher E and a key K, the 
method comprising: 

receiving n ciphertext blocks, where n is an integer greater than 0; 
setting Qo equal to an initial value; and 
for each ciphertext block of the n ciphertext blocks: 
computing = EkCQi-i) XOR C; ; 
computing Pj = M(Ci , Q'i); and 
computing Q\ = M(Q*i , Cj), 
thereby producing n plaintext blocks, 
wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Cj denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cy of block Ci , selects a first 

argument of M if bit Py is not encrypted, and selects a second argument of M if bit 

Pij is encrypted. 

17. (cancelled) The method according to claim 16 and wherein M is chosen 
in accordance with a standard indicating bits that are not encrypted 
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18. (cancelled) The method according to claim 17 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio- 
video standard. 

19. (cancelled) The method according to claim 18 and wherein the standard 
comprises MPEG-2. 

20. (cancelled) A method for producing at least one plaintext block from at 
least one ciphertext block using a block cipher E and a key K, the method 
comprising: 

receiving n ciphertext blocks, wherein n is an integer greater than 0, and an 
initial value IV; 

computing IV = M(Pi , IV); 
computing Qo = H(IV'); and 
for each ciphertext block of the n ciphertext blocks: 
computing Q'i = EK(Qi.i) XOR Ci ; 
computing Pi = M(Ci , Q'j); and 
computing Qj = M(Q'i , Cj), 
thereby producing n plaintext blocks, 
wherein: 

0 < i <= n, and 

H is a hash function, and 

Pj denotes an i-th plaintext block of the n plaintext blocks, and 
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Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cy of block Ci , selects a first 

argument of M if bit Py is not encrypted, and selects a second argument of M if bit 

Pjj is encrypted. 

2 1 . (cancelled) The method according to claim 20 and wherein H comprises 
SHAl. 

22. (cancelled) The method according to claim 20 and wherein H(IV') 
comprises Ek(IV') XOR IV'. 

23. (cancelled) The method according to claim 20 and wherein M is chosen 
in accordance with a standard indicating bits that are not encrypted. 

24. (cancelled) The method according to claim 23 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio- 
video standard. 

25. (cancelled) The method according to claim 24 and wherein the standard 
comprises MPEG-2. 

26. (cancelled) In a method for producing at least one plaintext block from 
at least one ciphertext block using a block cipher E and a key K in a stream mode, 
wherein Pi denotes an i-th plaintext block of the plurality of plaintext blocks, and 
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Ci denotes an i-th ciphertext block of the plurality of ciphertext blocks, an 
improvement comprising: 

for each bit Py of block Pj , selecting Cy as an output if bit Cy is not 
encrypted. 

27. (cancelled) The method according to claim 26 and wherein the stream 
mode comprises CFM mode. 

28. (cancelled) Apparatus for producing at least one plaintext block from at 
least one ciphertext block encrypted using a block cipher E and a key K, the at 
least one ciphertext block comprising n ciphertext blocks, the at least one plaintext 
block comprising n plaintext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

initialization apparatus for setting Qo equal to an initial value; and 

a computation unit operative, for each ciphertext block of the n ciphertext 

blocks: 

to compute = EK(Qi.i) XOR Ci ; 
to compute Pj = M(Ci , Q'i); and 
to compute Qi = M(Q'i , Cj), 

wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Cj denotes an i-th ciphertext block of the n ciphertext blocks, and 
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M is a selector function which, for each bit Cjj of block Cj , selects a first 
argument of M if bit Py is not encrypted, and selects a second argument of M if bit 
Py is encrypted. 

29. (cancelled) Apparatus for producing at least one plaintext block from at 
least one ciphertext block using a block cipher E and a key K, the at least one 
ciphertext block comprising n ciphertext blocks, the at least one plaintext block 
comprising n plaintext blocks, wherein n is an integer greater than 0, the apparatus 
comprising: 

a first computation unit for computing IV' = M(Pi , IV); 
a second computation unit for computing Qo = H(IV'); and 
a third computation unit operative, for each ciphertext block of the n 
ciphertext blocks: 

to compute Q'i = EkCQm) XOR Ci ; 

to compute Pj = M(Ci , Q'i); and 

to compute Qi = M(Q'i , Ci), 

wherein: 

0 < i <= n, and 

H is a hash function, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block Ci , selects a first 
argument of M if bit Py is not encrypted, and selects a second argument of M if bit 
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Pjj is encrypted. 

30. (cancelled) In apparatus for producing at least one plaintext block from 

at least one ciphertext block using a block cipher E and a key K in a stream mode, 

wherein Pj denotes an i-th plaintext block of the plurality of plaintext blocks, and 

Cj denotes an i-th ciphertext block of the plurality of ciphertext blocks, an 

improvement comprising: 

a selector unit operative, for each bit Py of block Pj , to select Cy as 
an output if bit Cy is not encrypted. 

3 1 . (Currently Amended) A system for scrambling/ descrambling at least 
one packets, the at least one packet having a must stay clear (MSC) section which 
must always stay in the clean the system comprising a scrambling/ descrambling 
device toi 

compute a Cipher Initialization Vector for the at least one packet as 

a function of at least part of the MSC section of the at least one packet: and 

scrambl e / descramble the at least one packets so that the at least one 

packet is descrambled bas e d on using an -the Cipher Initial ization V ectora lue of the 
at least one packet and a Key as input , e ach of th e pack e ts having a must stay cl e ar 
(MSC) s e ction which must always stay in th e clear, th e Initial Value for each of 
th e packets b e ing a function of at l e ast part of the MSC section of an as s ociated 
one of the packets b e ing processed . 

32. (Currently Amended) The system according to claim 3 1 , wherein the 
MSC section includes an adaptation field, the Cipher Initial ization V ector alue of 
the at least one packet being computed as a function of at least part of the 
adaptation field of the at least one packet being process e d . 
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33. (Currently Amended) The system according to claim 32, wherein the 
Cipher Initial ization V ectora hi e of the at least one packet is a function of the data 
content of the adaptation field of the one packe t b e ing proc e ss e d . 

34. (Currently Amended) A method for scrambling/ descrambling at least 
one packets, e ach of the at least one packets having a must stay clear (MSG) 
section which must always stay in the clear, the method comprising: 

d e termining computing m Cipher Initial ization V ector atue for eaeh 
ef-the at least one packets as a function of at least part of the MSC section of m 
associat e d the at least one ef4he-packet s being proc e ss e d ; and 

scrambling/ descrambling the at least one packets so that the at least 
one packet is descrambled bas e d on using the Cipher Initial ization V ectora kte of 
the at least one packet and a Key as input . 

35. (Currently Amended) The method according to claim 34, wherein 
the MSC section includes an adaptation field, the d e t e rmining computing 
including d e t e rmining of the Cipher Initial ization Vectorakje of the at least one 
packet being performed as a function of at least part of the adaptation field of the 
at least one packe t being processed . 

36. (Currently Amended) The method according to claim 35, wherein 
the d e t e rmining computing includ e s d e termining of the Cipher Initial ization 
V ector afae of the at least one packet is performed as a function of the data content 
of the adaptation field of the at least one packet b e ing proc e ssed . 

37. (cancelled) Apparatus for producing at least one ciphertext block from at 
least one plaintext block using a block cipher E and a key K, the at least one 
plaintext block comprising n plaintext blocks, the at least one ciphertext block 
comprising n ciphertext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 



13 



Reply to Office Communication Mailed 24 March 2010 

Serial Number 10/541,002 

means for setting Qo equal to an initial value; and 
means for computing: 

Qi = EK(Qi.i)XORPi;and 

Cj = M(Pi , Qi), for each plaintext block of the n plaintext blocks, 

wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Qj of block Cj, selects a first 

argument of M if bit Py is not to be encrypted, and selects a second argument of M 

if bit Pij is to be encrypted. 

38. (cancelled) Apparatus for producing at least one ciphertext block from at 
least one plaintext block using a block cipher E, a key K, and an initial value IV, 
the at least one plaintext block comprising n plaintext blocks, the at least one 
ciphertext block comprising n ciphertext blocks, wherein n is an integer greater 
than 0, the apparatus comprising: 

means for computing IV' = M(Pi , IV); 

means for computing Qo = H(IV'); and 

means for computing: 

Qi = EK(QM)XORPi;and 

Cj = M(Pi , Qi), for each plaintext block of the n plaintext blocks, 

wherein: 



14 



Reply to Office Communication Mailed 24 March 2010 

Serial Number 10/541,002 

0 < i <= n, and 

H is a hash function, and 

Pj denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cy of block Ci, selects a first 

argument of M if bit Pjj is not to be encrypted, and selects a second argument of M 

if bit Pjj is to be encrypted. 

39. (cancelled) Apparatus for producing at least one plaintext block from at 
least one ciphertext block encrypted using a block cipher E and a key K, the at 
least one ciphertext block comprising n ciphertext blocks, the at least one plaintext 
block comprising n plaintext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

means for setting Qo equal to an initial value; and 
means for computing: 

Qi-EK(QM)XORQ; 
Pi = M(Ci , Q'i); and 

Qi ^ M(Q'i , Ci), for each ciphertext block of the n ciphertext 

blocks, 
wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
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M is a selector function which, for each bit of block Cj, selects a first 
argument of M if bit Py is not encrypted, and selects a second argument of M if bit 
Pij is encrypted. 

40. (cancelled) Apparatus for producing at least one plaintext block from at 
least one ciphertext block using a block cipher E and a key K, the at least one 
ciphertext block comprising n ciphertext blocks, the at least one plaintext block 
comprising n plaintext blocks, wherein n is an integer greater than 0, the apparatus 
comprising: 

means for computing IV' = M(Pi , IV); 

means for computing Qo = H(IV'); and 

means for computing: 

Q'i = EK(Qi.,)XORQ; 
Pi = M(Ci , Q^); and 

Qi = M(Q*i , Ci), for each ciphertext block of the n ciphertext 

blocks, 
wherein: 

0 < i <= n, and 

H is a hash function, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
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M is a selector function which, for each bit Cy of block Cj, selects a first 
argument of M if bit Pjj is not encrypted, and selects a second argument of M if bit 
Pjj is encrypted. 

41-42. (cancelled) 

43. (New) A system for scrambling at least one packet, the at least one 
packet having a must stay clear (MSG) section which must always stay in the 
clear, the system comprising a scrambling device to: 

compute a Cipher Initialization Vector for the at least one packet as 
a function of at least part of the MSC section of the at least one packet; and 

scramble the at least one packets so that the at least one packet is 
scrambled using the Cipher Initialization Vector of the at least one packet and a 
Key as input. 

44. (New) The system according to claim 43, wherein the MSC section 
includes an adaptation field, the Cipher Initialization Vector of the at least one 
packet being computed as a function of at least part of the adaptation field of the at 
least one packet. 

45. (New) The system according to claim 44, wherein the Cipher 
Initialization Vector of the at least one packet is a function of the data content of 
the adaptation field of the one packet. 

46. (New) A method for scrambling at least one packet, the at least one 
packet having a must stay clear (MSC) section which must always stay in the 
clear, the method comprising: 

computing a Cipher Initialization Vector for the at least one packets 
as a function of at least part of the MSC section of the at least one packet; and 
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scrambling the at least one packets so that the at least one packet is 
scrambled using the Cipher Initialization Vector of the at least one packet and a 
Key as input. 

47. (New) The method according to claim 46, wherein the MSG section 
includes an adaptation field, the computing of the Cipher Initialization Vector of 
the at least one packet being performed as a function of at least part of the 
adaptation field of the at least one packet. 

48. (New) The method according to claim 47, wherein the computing of 
the Cipher Initialization Vector of the at least one packet is performed as a 
function of the data content of the adaptation field of the at least one packet. 
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